OSOC Security Analyst - TechOps & Client Integrations

Evolve Security

1d•$75,000 - $90,000

About The Position

Evolve Security is seeking an OSOC Security Analyst with a TechOps focus to support the technical onboarding and health of client integrations. The role works between the offensive security team and clients, ensuring engagements are prepared for testing. It includes deploying and maintaining Kali Linux testing appliances, configuring cloud access and assessment scope, resolving client-side technical issues, and supporting penetration testing and eASM activities alongside the OSOC team. The analyst serves as a technical point of contact during client kick-offs and onboarding, helps client IT teams complete setup requirements, and escalates blockers, scope discrepancies, and security incidents. The role also maintains testing infrastructure and documentation, automates onboarding and validation tasks, assists with eASM vulnerability validation, and contributes to improving internal processes and engagement quality. Evolve Security is a cybersecurity services firm headquartered in Chicago, Illinois, offering continuous penetration testing, training, and talent solutions, as well as the Evolve Academy cybersecurity bootcamp.

Requirements

1–2 years of experience in IT operations, system administration, TechOps, or information security.
Strong Linux administration skills, including hands-on experience using and troubleshooting Kali Linux.
Experience with VMware, Hyper-V, Proxmox, or VirtualBox, and building or customizing VM images and ISOs.
Solid networking fundamentals, including TCP/IP, subnetting, routing, VLANs, DNS, DHCP, NAT, firewalls, and VPN technologies.
Working knowledge of AWS, Azure, and/or GCP identity and access management, including IAM roles and policies, service principals, and service accounts.
Scripting experience in one or more of Python, Bash, or PowerShell.
Familiarity with TechOps tooling such as Git, Docker, Ansible, Terraform, or CI/CD pipelines.
Foundational understanding of penetration testing methodology and common offensive tools.
Security+ certification required.
Strong troubleshooting mindset and patience when working through problems with non-technical or busy client IT teams.
Ability to interface with clients using clear communication and consulting skills.
Strong self-motivation, organization, and ability to manage multiple client onboardings at once.
Strong oral and written communication skills and ability to work as part of a team.
Passion for cybersecurity and infrastructure, with curiosity to learn.

Nice To Haves

Familiarity with cloud security tools such as ScoutSuite, Prowler, Pacu, or ROADtools.
Linux, cloud, or offensive security certifications are a strong plus, including Linux+, RHCSA, AWS Solutions Architect or SysOps, AZ-104, AZ-500, PNPT, OSCP, or equivalent.

Responsibilities

Deploy, configure, and support Kali Linux testing appliances in client environments across virtualization platforms and cloud-hosted instances.
Troubleshoot appliance deployment and connectivity issues, including boot failures, network and VLAN placement, IP configuration, DNS, proxy and firewall restrictions, and VPN or tunnel connectivity.
Monitor deployed testing appliances and work with clients to restore access when appliances go offline.
Guide clients through AWS, Azure, and GCP cloud integration setup and validate permissions for assessment tools.
Review and validate client scope against the SOW and Rules of Engagement, including IP ranges, domains, subdomains, web applications, and cloud accounts.
Verify asset ownership and flag third-party-hosted or out-of-scope assets before testing begins.
Maintain and improve internal testing infrastructure, appliance images, and build pipelines; keep Kali builds patched, hardened, and equipped with the standard OSOC toolset.
Automate onboarding and validation tasks using scripting and infrastructure-as-code tools.
Serve as a technical point of contact during client kick-off calls and onboarding, translating technical requirements into actionable steps for client IT teams.
Escalate integration blockers, scope discrepancies, and security incidents to appropriate client contacts or internal team members.
Review the eASM dashboard and assist with validating vulnerabilities identified by the ASM system when needed.
Create and maintain documentation, runbooks, and client-facing setup guides for appliance deployment and cloud integrations.
Help improve Evolve Security processes, procedures, templates, and methodologies to increase onboarding speed and engagement quality.
Take on other duties as assigned to support enterprise and academy initiatives.
Support penetration testing and eASM activities alongside the OSOC team.